CN107092844A - Fuel dispenser input device tamper detection arrangement - Google Patents

Fuel dispenser input device tamper detection arrangement Download PDF

Info

Publication number
CN107092844A
CN107092844A CN201710167832.6A CN201710167832A CN107092844A CN 107092844 A CN107092844 A CN 107092844A CN 201710167832 A CN201710167832 A CN 201710167832A CN 107092844 A CN107092844 A CN 107092844A
Authority
CN
China
Prior art keywords
tamper
switch
portion
response
circuit board
Prior art date
Application number
CN201710167832.6A
Other languages
Chinese (zh)
Inventor
G.卡拉佩里
P.A.罗伯特森
A.托希
Original Assignee
吉尔巴科公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to US13/105,557 priority Critical
Priority to US13/105,557 priority patent/US8786272B2/en
Priority to US13/467,592 priority patent/US9166586B2/en
Application filed by 吉尔巴科公司 filed Critical 吉尔巴科公司
Priority to CN201280034593.2A priority patent/CN103703494B/en
Publication of CN107092844A publication Critical patent/CN107092844A/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/86Secure or tamper-resistant housings
    • GPHYSICS
    • G08SIGNALLING
    • G08BSIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B13/00Burglar, theft or intruder alarms
    • G08B13/02Mechanical actuation
    • G08B13/12Mechanical actuation by the breaking or disturbance of stretched cords or wires
    • G08B13/126Mechanical actuation by the breaking or disturbance of stretched cords or wires for a housing, e.g. a box, a safe, a room
    • G08B13/128Mechanical actuation by the breaking or disturbance of stretched cords or wires for a housing, e.g. a box, a safe, a room the housing being an electronic circuit unit, e.g. memory or CPU chip
    • GPHYSICS
    • G08SIGNALLING
    • G08BSIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B29/00Checking or monitoring of signalling or alarm systems; Prevention or correction of operating errors, e.g. preventing unauthorised operation
    • G08B29/02Monitoring continuously signalling or alarm systems
    • G08B29/04Monitoring of the detection circuits
    • G08B29/046Monitoring of the detection circuits prevention of tampering with detection circuits
    • GPHYSICS
    • G08SIGNALLING
    • G08BSIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B29/00Checking or monitoring of signalling or alarm systems; Prevention or correction of operating errors, e.g. preventing unauthorised operation
    • G08B29/02Monitoring continuously signalling or alarm systems
    • G08B29/06Monitoring of the line circuits, e.g. signalling of line faults
    • G08B29/08Signalling of tampering with the line circuit
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2101Auditing as a secondary aspect

Abstract

A system for detecting unauthorized removal or tampering. The system comprises a printed circuit board having tamper-response electronics and a flexible circuit assembly defining a connector portion, a switch portion, and a cable extending between the connector portion and the switch portion. The flexible circuit assembly is coupled with the printed circuit board at the connector portion. The flexible circuit assembly comprises a plurality of layers each comprising a flexible dielectric substrate and a switch disposed in the switch portion. The switch is in electrical communication with the tamper-response electronics of the printed circuit board via a conductive path. The flexible circuit assembly also comprises a tamper-responsive conductor circuit enclosing the conductive path. The tamper-responsive conductor circuit is in electrical communication with the tamper-response electronics of the printed circuit board.

Description

加油机输入设备篡改检测装置 The input device falsification detection apparatus tanker

[0001] 本申请是申请日为2012年5月10日、申请号为201280034593.2、发明名称为“加油机输入设备篡改检测装置”的发明专利申请的分案申请。 [0001] This application is filed on May 10, 2012, Application No. 201280034593.2, divisional applications entitled "tanker input device falsification detection apparatus" of the invention patent application.

技术领域 FIELD

[0002] 本发明总体上涉及加油机和其它零售支付系统。 It relates to the tanker and other retail payment system generally [0002] present invention. 更具体地,本发明涉及用于检测未经授权地拆除或篡改支付系统用户接口设备的传感器。 More particularly, the present invention relates to a sensor for detecting the unauthorized removal or tampering with the payment system user interface device.

背景技术 Background technique

[0003] 借助背景技术,支付系统已经结合到燃料供给站点之中,以便允许客户使用信用卡或借记卡来支付燃料及其它商品和服务(如洗车、快餐或者便利店的产品)。 [0003] With background, the payment system has been incorporated into the fuel supply site to allow customers to use a credit or debit card to pay for fuel and other goods and services (such as car washes, convenience stores or fast-food products). 这样的支付系统包括各种输入设备,如卡片读取器和PIN键盘,其被构造为接受处理支付的必要数据。 Such payment systems include various input devices such as a keyboard and PIN card reader, which is configured to accept payment of the necessary data processing. 客户可通过将带有磁条或芯片的支付卡递交给支付卡读取器来提供一定的支付数据。 Customers can pay by card with a magnetic stripe or chip submitted to the payment card reader to provide certain payment data. 存储在支付卡上的数据可包含以下一项或多项:主账号(PAN)、持卡人的姓名、服务代码以及卡片的到期日期。 Data stored on the payment card may include one or more of: the expiration date of the primary account number (PAN), cardholder name, service code and the card. 此外,如果需要完成交易,贝1J客户可使用PIN (personal identification number,个人识别码)输入设备(例如,PIN键盘)来输入账户信息,如PIN码。 In addition, if you need to complete the transaction, Tony 1J customers (personal identification number, PIN) input devices (eg, PIN keyboard) to enter account information, such as a PIN code using PIN. 该系统将数据传送给负责客户账户验证的远程主机系统。 The system will transmit data to the remote host system is responsible for customer account verification.

[0004] 由于欺诈带给客户、商家和银行的持续挑战,其中,支付卡公司在支付卡交易期间需要越来越多的安全。 [0004] Since the fraud to customers, merchants and banks continued to challenge, in which payment card companies need more and more security during payment card transactions. 因此,处理、存储或传输支付数据的组织必须符合一定的行业标准。 Therefore, processing, storing, or transmitting payment data organization must meet certain industry standards. 这些行业标准通常要求输入设备(例如,卡片读取器和PIN输入设备)满足一定的物理安全性要求,含有防拆除机构,也被称为拆卸传感器(dismount sensor)。 These industry standards typically require an input device (e.g., a card reader and a PIN entry device) meet certain physical security requirements, containing anti-removal means, also referred to as a sensor disassembled (dismount sensor). 在过去,这些防拆除机构包含基于电缆的开关,其定位在难以接触的地方,这为电缆和开关两者提供了某种程度的保护。 In the past, the removal preventing means comprises a switch on the cable, which is positioned in hard contact, which provides some degree of protection for both the cable and a switch. 其它的防拆除机构包含位于输入设备上的微动开关,当输入设备安装到一结构上时,闭合该微动开关。 Other removal preventing means comprises a micro switch located on the input device, when the input device mounted on a structure, the micro switch is closed. 在这两种情况下,输入设备在开关和结构之间的接口周围不安全,并没有提供足够的固有安全性,以满足新的更严格的支付卡公司授权。 In both cases, the input device around the interface between the switch and structurally unsafe, and does not provide enough inherent safety, to meet new, more stringent payment card company authorization.

发明内容 SUMMARY

[0005] 本发明认识到并解决了现有技术结构和方法的缺点。 [0005] The present invention recognizes and addresses the shortcomings of the prior art constructions and methods. 根据一个实施方式,本发明提供了一种用于检测未经授权的拆除或篡改的系统。 According to one embodiment, the present invention provides a method for detecting unauthorized removal or tampering system. 该系统包括:印刷电路板,具有篡改响应电子器件;和柔性电路组件,限定连接器部分、开关部分和在连接器部分和开关部分之间延伸的电缆。 The system comprising: a printed circuit board, an electronic device having a tamper-response; and a flexible circuit assembly, defining a connector portion, a switch portion between the cable and the connector portion and switch portion extends. 柔性电路组件在连接器部分处与印刷电路板联接。 A flexible circuit assembly coupled to the connector portion of the printed circuit board. 柔性电路组件包括:多个层,每个层包括柔性绝缘衬底;和布置在开关部分中的开关。 The flexible circuit assembly comprising: a plurality of layers, each layer comprising a flexible insulating substrate; and a switch disposed in the switch section. 开关经由导电路径与印刷电路板的篡改响应电子器件电连通。 Electrically communicating via the switching device in response to tampering with the electronic conducting path of the printed circuit board. 柔性电路组件还包括包围导电路径的篡改响应导体电路。 The flexible circuit assembly further comprises a conductive path surrounding the tamper-responsive conductor circuit. 篡改响应导体电路与印刷电路板的篡改响应电子器件电连通。 Tamper tamper-responsive conductor circuit of the printed circuit board in response to electrical communication with an electronic device.

[0006] 根据另一实施方式,本发明包括一种检测未经授权的拆除或篡改的方法。 [0006] According to another embodiment, the present invention includes a method of unauthorized removal or tampering detection. 该方法包括的步骤有:提供具有篡改响应电子器件的印刷电路板;以及提供包括开关部分的柔性电路组件,所述开关部分包括连接器部分、开关部分和在连接器部分和开关部分之间延伸的电缆。 The method comprising the steps of: a printed circuit board providing a tamper-response electronic device; and providing a switch assembly including a flexible circuit portion, the switching portion includes a connector portion extending between the switching portion and connector portion and switch portion cable. 开关部分包括由铰链部分相连接的第一半部和第二半部。 A first switching portion including and second halves by the hinge connecting portion. 柔性电路组件还包括:多个层,每个层包括柔性绝缘衬底;和布置在开关部分中的开关。 The flexible circuit assembly further comprising: a plurality of layers, each layer comprising a flexible insulating substrate; and switches disposed in the switching portion. 开关经由导电路径与印刷电路板的篡改响应电子器件电连通。 Electrically communicating via the switching device in response to tampering with the electronic conducting path of the printed circuit board. 另外,柔性电路组件包括包围导电路径的第一篡改响应导体电路。 Further, the flexible circuit assembly includes a conductive path surrounding the first tamper-responsive conductor circuits. 第一篡改响应导体电路与印刷电路板的篡改响应电子器件电连通。 A first tamper-responsive tamper conductor circuit and a printed circuit board of the electronic device in response to the electrical communication. 该方法还包括:在连接器部分处将柔性电路组件安装到印刷电路板;以及在铰链部分处折叠开关部分, 并将第一半部固定在第二半部上以将开关嵌入第一半部和第二半部之间。 The method further comprising: a connector mounting portion of the flexible circuit assembly to the printed circuit board; and a switch in the folded portion of the hinge portion, and is fixed to the first half of the second half to the first half of the switch insert and between the second halves.

[0007] 根据另一实施方式,本发明提供了一种用于检测未经授权的拆除或篡改的系统。 [0007] According to another embodiment, the present invention provides a method for detecting unauthorized removal or tampering with the system. 该系统包括:输入设备,包括篡改响应电子器件和存储器;和与输入设备联接的柔性电路组件。 The system comprising: an input device comprising an electronic device and a memory in response to tampering; flexible circuit assembly and coupled with the input device. 柔性电路组件包括外层以及布置在输入设备和外层之间的第一内层。 The flexible circuit assembly includes a first outer layer and an inner layer disposed between the input device and the outer layer. 第一内层包括至少一个开关。 The first inner layer comprises at least one switch. 该系统还包括电缆,所述电缆与柔性电路组件联接并可操作地连接到输入设备的篡改响应电子器件。 The system further includes a cable coupled to the flexible circuit assembly and operatively connected to the input device in response to tampering with the electronic device. 柔性电路组件的外层和电缆包括第一篡改响应导体电路。 The flexible circuit assembly and the cable outer conductor circuit includes a first tamper-responsive. 至少一个开关和第一篡改响应导体电路经由电缆与篡改响应电子器件电连通。 At least a first switch and a tamper-responsive conductor circuit via a communication cable electrically tamper-response electronics.

[0008] 根据另一实施方式,本发明提供了一种用于输入设备的多层篡改检测装置,该输入设备包括篡改响应电子器件和存储器。 [0008] According to another embodiment, the present invention provides a multilayer tamper detection means for the input device, the input device includes a tamper-response electronics and memory. 多层传感器包括构造为连接到输入设备的柔性电路组件。 The multilayer sensor comprises a flexible circuit assembly configured to be connected to the input device. 柔性电路组件包括:外层,包括第一篡改响应导体电路;和第一内层,布置在外层之下。 The flexible circuit assembly comprising: an outer layer comprising a first tamper-responsive conductor circuit; and a first inner layer, disposed beneath the outer. 第一内层包括至少一个开关、拆除检测电路和外界导体检测电路。 The first inner layer comprises at least one switch, and removal detection circuit detecting circuit outside the conductor. 至少一个开关被构造为当致动至少一个开关时闭合拆除检测电路,并且外界导体检测电路通常是打开的。 At least one switch is configured to close when the removal detection circuit actuating at least one switch, and the external conductor detector circuit is normally open. 第一篡改响应导体电路、拆除检测电路和外界导体检测电路被构造为与输入设备的篡改响应电子器件电连通。 First tamper-responsive conductor circuit, removal detection circuit, and the external conductor tamper detection circuit is configured with the input device in response to electrical communication with an electronic device.

[0009] 根据另一实施方式,本发明提供了一种检测未经授权的拆除或篡改输入设备的方法,该输入设备包括篡改响应电子器件和存储器。 [0009] According to another embodiment the present invention provides a method for removing or detecting unauthorized tampering input device, which input device comprises a tamper-response electronics and memory. 该方法包括的步骤有:提供与输入设备联接的柔性电路组件。 The method comprising the steps of: providing a flexible circuit assembly coupled to the input device. 柔性电路组件包括:外层,包括第一篡改响应导体电路;和第一内层,布置在输入设备和外层之间。 The flexible circuit assembly comprising: an outer layer comprising a first tamper-responsive conductor circuit; and a first inner layer, disposed between the input device and an outer layer. 第一内层包括至少一个开关、拆除检测电路和外界导体检测电路。 The first inner layer comprises at least one switch, removal detection circuit detecting circuit and external conductor. 至少一个开关可操作地连接到拆除检测电路,并且外界导体检测电路通常是打开的。 At least one switch operatively connected to the removal detection circuit, and the external conductor detector circuit is normally open. 第一篡改响应导体电路、拆除检测电路和外界导体检测电路与输入设备的篡改响应电子器件电连通。 First tamper-responsive conductor circuit, and removal of tamper detection circuit detecting the outside conductor circuit with an input device in response to the electronic device in electrical communication. 该方法还包括的步骤有:监控第一篡改响应导电电路、拆除检测电路和外界导体检测电路的电气特性。 The method further comprises the steps of: monitoring a first tamper-responsive conductive circuit, and removal of the electrical characteristics detecting circuit detecting circuit outside the conductor. 最后,该方法包括的步骤有:当检测到第一篡改响应导电电路、拆除检测电路和外界导体检测电路之一的电气特性发生变化时,在篡改响应电子器件处产生篡改响应。 Finally, the method comprising the steps of: when a first tamper-responsive conductive circuit, when the removal of one of the electrical characteristics of the external conductor, and a detection circuit detecting circuit is changed in response to the electronic device at the tamper tamper response generated.

[0010] 在结合附图阅读优选实施方式的以下详细描述之后,本领域技术人员将意识到本发明的范围并认识到其附加方面。 [0010] After reading the following detailed description of preferred embodiments in conjunction, one skilled in the art will appreciate the scope of the present invention and recognize additional aspects.

附图说明 BRIEF DESCRIPTION

[0011] 参考附图,本说明书阐述了本发明的完整和能够实现的公开,包含本发明针对本领域普通技术人员的最佳模式,其中: [0011] Referring to the drawings, the specification describes a complete and enabling disclosure of the present invention, comprises the best mode of the present invention is directed to those of ordinary skill in the art, wherein:

[0012] 图1是零售燃料分配环境的示意图,其中可采用本发明的实施方式。 [0012] FIG. 1 is a schematic view of a fuel dispensing retail environment in which embodiments of the present invention may be employed.

[0013] 图2是示例性加油机的前视图,其可利用POS设备和/或图1零售燃料供给环境内的现场控制器进行操作。 [0013] FIG. Is a front view of an exemplary two dispensers, POS which can utilize equipment and / or site controller in FIG retail environment of a fuel feed operation.

[0014] 图3A是根据本发明实施方式的安全卡读取器输入设备的侧视图。 [0014] FIG 3A is a side view of an input device according to the embodiment of the security card reader embodiment of the present invention.

[0015] 图3B是图3A的输入设备的前视图。 [0015] FIG. 3B is a front view of the input device of FIG. 3A.

[0016] 图4是依照本发明实施方式构成并构造为检测图3A和3B输入设备的篡改的柔性电路组件的前视图。 [0016] FIG 4 is a configuration according to an embodiment of the present invention is configured to detect input Figures 3A and 3B a front view of the flexible circuit assembly tampering device.

[0017] 图5是根据本发明实施方式的分解透视图,示出了图4的柔性电路组件的各层。 [0017] FIG. 5 is an exploded perspective view of an embodiment of the present invention, illustrating the various layers of the flexible circuit assembly of FIG.

[0018] 图6是根据本发明实施方式的图3A和3B输入设备的示例性安全区域的示意图,其与图4和5柔性电路组件的篡改响应导体电路、拆除检测电路以及外界导体检测电路电连通。 [0018] FIG. 6 is a diagram of an exemplary security area diagram of an embodiment of the present invention. 3A and 3B input device according to its tampering and 4 and 5. The flexible circuit assembly FIG responsive conductor circuit, removal detection circuitry and external conductor detector circuit electrically connectivity.

[0019] 图7是根据本发明另一实施方式的柔性电路组件的平面图,为说明目的示出有局部剖开的外层。 [0019] FIG. 7 is a plan view of the flexible circuit assembly according to another embodiment of the present invention, for illustrative purposes there is shown a partially broken away outer layers.

[0020] 图8A是根据本发明另一实施方式的顶视图,示出了三层柔性电路组件。 [0020] FIG. 8A is a top view of another embodiment of the present invention, illustrating a three flexible circuit assemblies.

[0021] 图8B是图8A的柔性电路组件的第四层的底视图。 [0021] FIG 8B is a bottom view of a fourth layer of the flexible circuit assembly of FIG. 8A.

[0022] 图8C是图8A的柔性电路组件的可选的第五层的顶视图。 [0022] FIG. 8C is a top view of an optional fifth layer of the flexible circuit assembly of FIG. 8A.

[0023] 图9是示出将图8柔性电路组件附接至印刷电路板的示意侧视图。 [0023] FIG. 9 is a schematic side view of FIG. 8 is attached to the flexible circuit assembly to a printed circuit board.

[0024] 图10是图8柔性电路组件用之于P IN键盘和显示设备的透视图。 [0024] FIG. 10 is a benefit of the assembly of FIG. 8 a perspective view of a flexible circuit of the keyboard and the display device P IN.

[0025] 在本说明书和附图中重复使用的附图标记旨在代表本发明的相同或相似的特征或元件。 [0025] Repeat use of reference in the present specification and drawings is intended to represent same or analogous features or elements representative of the present invention.

具体实施方式 Detailed ways

[0026] 现在将详细参考本发明目前优选的实施方式,其中一个或多个示例示于附图中。 [0026] Reference will now be made in detail to the presently preferred embodiment of the present invention, one or more examples of which are shown in the accompanying drawings. 借助本发明的解释来提供每个示例,而不是限制本发明。 By means of the present invention is provided to explain each of the examples and not to limit the present invention. 事实上,对本领域技术人员显而易见的是,在不脱离本发明的范围或精神的情况下,在本发明中可以作出修改和变型。 In fact, the skilled person will be apparent that, without departing from the scope or spirit of the present invention, in the present invention, modifications and variations may be made. 例如, 作为一个实施方式一部分进行图示或描述的特征可用在另一实施方式上,以产生更进一步的实施方式。 For example, as a way of embodiments illustrated or described features can be used on a portion of another embodiment to yield a still further embodiment. 因此,本发明旨在涵盖落入所附权利要求及其等同物的范围内的这些修改和变型。 Accordingly, the present invention is intended to embrace the appended claims and their equivalents such modifications and variations within the scope of the.

[0027] 本发明的实施方式提供了一种多层柔性电路组件,其可用于提供针对一个或多个输入设备的篡改响应安全。 Embodiment [0027] The present invention provides a multilayer flexible circuit assemblies, which may be used to provide a response to security against tampering with one or more input devices. 如本文中所使用的,术语“输入设备”泛指安全设备,包含但不限于加密PIN键盘、小键盘、触摸屏、安全卡读取器以及智能卡读取器,其能够接收与输入设备的用户相关联的信息。 Users As used herein, the term "input device" refers to the security device, including but not limited to encrypted PIN keyboard, a keypad, a touchscreen, the security card reader and a smart card reader, which is capable of receiving input device associated associated information. 这样的信息可包含与支付卡相关联的信息,诸如PAN或其它账户号码、用户姓名、服务代码和卡片到期日期。 Such information may contain information and payment card associated with such PAN or other account number, user name, service code and the card expiration date 另外,这样的信息可以包含与现场处理或在私人零售商网络中处理的支付设备相关联的数据,诸如来自忠诚度或特定程序卡片的数据。 In addition, such information may include data associated with a payment processing device or processing site in the private network of retailers, such as data or loyalty card from a particular program.

[0028] 理想的是,可用于本发明的许多输入设备包含安全区域,其包括处理器、存储器或存储单元以及篡改响应电子器件。 [0028] Ideally, the input device many useful in the present invention comprise a safe area, which include a processor, memory or storage units and a tamper-responsive electronics. 输入设备的存储器可存储一个或多个用于在收到时立即加密输入信息的加密算法、密钥和/或密码。 Input device memory may store one or more used to encrypt the encryption algorithm information, the key and / or password immediately upon receipt. 在优选实施方式中,输入设备可允许对输入信息进行三重DES—次一密(DUKPT)加密。 In a preferred embodiment, the input device may allow to input information once a triple DES- encrypted (DUKPT) encryption. 如下文所述,在篡改响应电子器件检测到未经授权的访问或篡改的情况下,可优选地擦除、删除或销毁输入设备的内容,所述内容包含:输入设备的处理器和/或存储器所含有的数据,或由输入设备的处理器和/或存储器所处理的数据。 As described below, in the case of detecting unauthorized access or tampering tamper-response electronic device may preferably be erased, deleted or destroy the contents of the input device, the content comprising: a processor input device and / or data contained in the memory, or data input device by a processor and / or memory processed. 可替换地,如果篡改发生,输入设备的足以识别输入信息或加密算法、密钥和/或密码的内容的任何部分被擦除。 Alternatively, if tampering occurs sufficient to identify the input device to enter information or the encryption algorithm, any part of the contents keys and / or passwords are erased.

[0029] 本文中所使用的术语“层”一般是指一个或多个片材、膜、衬底等,它在柔性电路组件中服务于特定的功能(例如,交换、安全网、地平面)。 As used herein, the term "layer" [0029] generally refers to one or more sheets, film, substrate, etc., it serves a specific function in the flexible circuit assembly (e.g., switching, safety nets, ground plane) . 因此,在一些实施方式中,层可包括印刷电路、开关或其它电子元件、粘合剂、绝缘材料、屏蔽层和/或密封剂。 Thus, in some embodiments, the layer may include a printed circuit, a switch or other electronic components, an adhesive, an insulating material, shield and / or sealant.

[0030] 本发明的一些实施方式特别适用于零售服务站环境的输入设备,下面的讨论在这方面将描述优选的实施方式。 [0030] Some embodiments of the present invention is particularly applicable to the input device retail service station environment, the following discussion in this respect a preferred embodiment will be described. 然而,本领域技术人员将会理解,本发明并不局限于此。 However, those skilled in the art will appreciate that the present invention is not limited thereto. 实际上,可以设想的是,本发明可以与任何适当的零售环境一起使用。 Indeed, it is contemplated that the present invention may be used with any suitable retail environment. 此外,可以设想的是,本发明可以与任何合适的输入设备一起使用,只要输入设备承载了需要保护以防篡改的信息即可。 Furthermore, it is contemplated that the present invention may be used with any suitable input apparatus, as long as the input apparatus to the information carrier need to protect against tampering.

[0031] 现在参考图1,示例性的燃料供给环境10可包括中央建筑12,洗车处14以及多个燃料供给岛16。 [0031] Referring now to Figure 1, an exemplary fueling environment 10 may comprise a central building 12, car wash 14, and a plurality of fuel supply 16 islands. 中央建筑12不需要居中地位于燃料供给环境10内,而是成为燃料供给环境10 的焦点,并可在其中容纳便利店18和/或快速服务餐厅20。 Central building 12 need not be centrally located within the fueling environment 10, but has become the focus of the fueling environment 10, which can be accommodated in the convenience store 18 and / or 20 quick service restaurants. 便利店18和快速服务餐厅20两者可分别包含销售点(POS) 22、24。 Both convenience stores and quick service restaurants 18 20 respectively include point of sale (POS) 22,24. ? 03 22、24可包括单台计算机或服务器,其可操作地连接到相关联的卡片读取器和支付终端。 03 22, 24 may comprise a single computer or server, which is operatively connected to an associated card reader and payment terminals. 此外,POS 22、24可包含显示器、触摸屏和/或其它输入设备。 In addition, POS 22,24 may include a display, a touch screen, and / or other input device.

[0032] 中央建筑12还可容纳现场控制器(SC) 26,这在一示例性实施方式中可能是由北卡罗来纳州格林斯博罗的Gilbarco公司出售的PASSPORT®P〇S系统,但可使用第三方的现场控制器。 [0032] The central building 12 may also receive site controller (SC) 26, which may be PASSPORT®P〇S system sold by Gilbarco of Greensboro, North Carolina's In an exemplary embodiment, but may be used third-party site controller. 现场控制器26可控制燃料供给交易和其它常规活动的授权,这很好理解,并且现场控制器26可优选地与每个POS操作性地连通。 Site controller 26 may control the fueling transactions and other conventional activities authorization, it is well understood, and the site controller 26 may be preferably operatively communicating with each POS. 可替换地,根据需要或期望,现场控制器26 可结合到诸如销售点22等POS中。 Alternatively, as needed or desired site controller 26 may be incorporated into the point of sale, such as the POS 22 and the like.

[0033] 另外,根据需要或期望,现场控制器26可具有异地通信链路28,允许与用于信用卡/借记卡授权、内容提供、报告用途等的远程主机处理系统30通信。 [0033] Further, if necessary or desired, the controller 26 may have a remote site communication link 28 allowing communication with a remote host processing system for credit / debit card authorization, content provider, or the like 30 for reporting purposes. 在一个实施方式中,通信链路28可以是独立的路由器、交换机或网关,但应当意识到的是,现场控制器26可额外地执行这样的设备的功能,并因此替代这样的设备。 In one embodiment, the communication link 28 may independently be routers, switches or gateways, it should be appreciated that, site controller 26 can additionally perform the function of such apparatus, and thus replace such devices. 根据需要或期望,异地通信链路28可通过公用交换电话网(PSTN)、因特网两者等进行发送。 Needed or desired, off-site communication link 28 may be transmitted through the public switched telephone network, the Internet, both (PSTN) and the like. 远程主机处理系统30可包括由诸如金融机构等第三方维护的至少一个服务器。 Remote host processing system 30 may include at least one server by a third party, such as financial institutions and other maintenance. 虽然所示只有一个远程主机处理系统30,但本领域技术人员将意识到,在零售支付系统中允许经由多个支付卡公司或金融机构发行的支付设备进行支付,现场控制器26可与多个远程主机处理系统30通信。 Although shown only a remote host processing system 30, but those skilled in the art will appreciate that allow retail payment system payment devices via multiple payment card company or financial institution issuing the payment, with more than 26 on-site controller remote host processing system 30 communication.

[0034] 洗车处14可具有与之相关联的POS 32,P0S 32为库存和/或销售目的而与现场控制器26通信。 [0034] The car wash 14 may have a POS 32, P0S 32 of inventory and / or sales purposes communicate with the site controller 26 associated therewith. 可替代地,洗车处14可以是独立的单元。 Alternatively, washing at 14 may be a separate unit. 请注意,洗车处14、便利店18和快速服务餐厅20所有都是可选的,没有必要出现在给定的燃料供给环境中。 Please note that the 14 car washes, 18 convenience stores and 20 quick service restaurants are all optional, and need not be present in a given fueling environment.

[0035] 燃料供给岛16可具有一个或多个定位在其上的加油机34。 [0035] The fuel supply islands 16 may have one or more positioning on its tanker 34. 例如,加油机34可以是由北卡罗来纳州格林斯博罗的Gilbarco公司出售的ENCORE®加油机。 For example, the dispenser 34 can be sold by the tanker ENCORE® North Carolina Greensboro Gilbarco company. 根据需要或期望, 加油机34通过诸如两线、RS 422、以太网、无线等任何合适的链路与现场控制器26电子通{目。 Necessary or desired, dispenser 34 through 26 electronic communications {mesh such as a two-wire, RS 422, Ethernet, wireless, etc. Any suitable link with the site controller.

[0036] 燃料供给环境10还具有一个或多个适于在其中容纳燃料的地下储罐(UST) 36。 [0036] The fuel supply environment 10 also has one or more underground storage tanks adapted therein (the UST) 36 receiving fuel. 如此,UST 36每个可以是双层壁罐。 Thus, UST 36 each may be a double wall tanks. 另外,每个UST 36可包含与之相关联的罐监控器(TM) 38。 Further, each UST 36 may comprise therewith associated tank monitor (TM) 38. 罐监控器38可(根据需要或期望,或者通过现场控制器26,或者直接地)与加油机34通信,以确定燃料的配送量并将所分配燃料与UST 36内的燃料当前水平比较来确定UST 36是否泄漏。 Tank monitor 38 may (if necessary or desired, or site controller 26 or directly through) in communication with dispenser 34, to determine the distribution of the amount of fuel dispensed and the current fuel level in the fuel is determined by comparing 36 UST UST 36 leaks.

[0037] 罐监控器38可与现场控制器26通信,并进一步可具有用于泄漏检测报告、库存报告等的异地通信链路40。 [0037] The tank monitor 38 may communicate with the site controller 26 and further may have remote communication for leak detection reporting, inventory reporting link 40. 很像异地通信链路28,异地通信链路40可通过PSTN、因特网两者等。 Much like the off-site communication link 28, via remote communications link 40 the PSTN, the Internet, etc. both. 如果存在异地通信链路28,则不需要存在异地通信链路40,反之亦然,但根据需要或期望可存在两个链路。 If the off-site communication link 28 is present, the off-site communication link 40 need not be present, and vice versa, may be needed or desired but the presence of two links.

[0038] 加油机和零售燃料供给环境的进一步信息和示例载于美国专利:6435204 (题为“燃料分配系统(Fuel Dispensing System)”);5956259 (题为“智能燃料供给(Intelligent Fueling) ”); 5734851 (题为“加油机中的多媒体视频/图形(Multimedia Video/Graphics in Fuel Dispensers)”);6052629 (题为“互联网功能浏览器加油机建筑(Internet Capable Browser Dispenser Architecture)”);5689071 (题为“范围广、精度高的流量计(Wide Range,High Accuracy Flow Meter)”);6935191 (题为“加油机燃料流量计设备、系统和方法(Fuel Dispenser Fuel Flow Meter Device ,System and Method)”);和7289877 (题为“用于现金客户的燃料分配系统(Fuel Dispensing System for Cash Customers)”),所有这些专利的全部内容通过引用并入本文用于所有目的。 [0038] Further information and sample dispenser and retail fueling environment is contained in U.S. Patents: 6,435,204 (entitled "fuel distribution system (Fuel Dispensing System)"); 5956259 (titled "Intelligent fuel supply (Intelligent Fueling)") ; 5,734,851 (entitled "the tanker multimedia video / graphics (multimedia video / graphics in Fuel dispensers)"); 6052629 (entitled "Internet-enabled browser tanker construction (Internet Capable browser dispenser architecture)"); 5689071 ( entitled "wide range, high accuracy flow meter (wide range, high accuracy Flow meter)"); 6935191 (entitled "tanker fuel metering devices, systems and methods (fuel dispenser fuel Flow meter device, system and method) "); and 7,289,877 (entitled" cash client fuel distribution system (fuel Dispensing system for cash customers) "), the entire contents of all of which are incorporated herein by reference for all purposes. 示例性罐监控器38可以是由康奈提格州锡姆斯伯里的Veeder-Root公司制造和出售的TLS-450。 An exemplary tank monitor 38 may be manufactured and TLS-450 sold by, CT 锡姆斯伯里 the Veeder-Root Company. 有关罐监控器及其操作的更多信息,参考美国专利:5423457 (题为“实时罐产品损耗检测系统(Real time tank product loss detection system)”);5400253(题为“用于便利店和汽车/卡车服务站的自动统计库存对账系统(Automated Statistical Inventory Reconciliation System for Convenience Stores and Auto/truck Service Stations)''); 5319545 (题为“用于监控多个加油机和燃料供应罐的系统(System to Monitor Multiple Fuel Dispensers and Fuel Supply Tank)”);和4977528 (题为“用于确定罐中材料量的设备和方法(Apparatus and Method for Determining the Amount of Material in A Tank) ”),所有这些专利的全部内容通过引用结合在此用于所有目的。 For more information about the tank monitor its operations, refer to US Patent: 5,423,457 (entitled "Real-time pot product loss detection system (Real time tank product loss detection system)"); 5400253 (entitled "convenience store and car / truck service station automatic statistical inventory reconciliation system (automated statistical inventory reconciliation system for Convenience Stores and Auto / truck service stations) ''); 5319545 (entitled "system for monitoring multiple refueling and fuel supply tank ( System to Monitor Multiple Fuel Dispensers and Fuel Supply tank) "); and 4,977,528 (entitled" amount of material in the tank apparatus and method (apparatus and method for determining the amount of material in a tank) for determining "), all of which the entire contents of which patent is incorporated herein by reference for all purposes.

[0039] 图2示出了根据本发明实施方式的加油机34,它可与现场控制器26关联操作。 [0039] FIG. 2 shows a 34, which may be 26 associated with the operation of the field controller according dispenser embodiment of the present invention. 加油机34包含控制系统42,其可以是处理器、微处理器、控制器、微控制器或具有相关联的存储器和运行于其上的软件程序的其它合适电子器件。 Dispenser 34 includes a control system 42, which may be a processor, a microprocessor, controller, microcontroller, or other suitable electronic device having a software program running on a memory and associated thereto. 在优选的实施方式中,控制系统42可对比于在由Gilbarco公司出售的CRIND和TRIND类型单元中使用的基于微处理器的控制系统。 In a preferred embodiment, the control system 42 can be compared to a microprocessor-based control system for use in CRIND TRIND type unit and sold by Gilbarco's company. 控制系统42与现场控制器26可操作地通信。 Control system 42 and the site controller 26 operable communication. 如下面更详细描述的,控制系统42进一步控制加油机34的各个方面。 As greater detail below, the control system 42 to further control various aspects of the dispenser 34 is.

[0040] 控制系统42的存储器可以是任何合适的存储器或计算机可读介质,只要它能够由控制系统访问即可,包含随机存取存储器(RAM)、只读存储器(ROM)、可擦除可编程ROM (EPROM)或者电EPROM (EEPROM)、CD-ROM、DVD或其它光盘存储器、固态驱动器(SSD)、磁盘存储器,包含软盘或硬盘驱动器、任何类型的合适非挥发性存储器,诸如安全数字(SD)、闪存、 记忆棒或可用于携带或存储计算机程序代码(采用计算机可执行程序的形式)、指令或数据的任何其它介质。 [0040] The memory control system 42 may be any suitable memory or computer readable medium, as long as it can access to the control system, comprising a random access memory (RAM), a read only memory (ROM), an erasable programming ROM (EPROM) or an electrically EPROM (EEPROM), CD-ROM, DVD or other optical disk storage, solid state drives (the SSD), magnetic disk storage, including floppy or hard drive, any type of suitable non-volatile memory, such as a secure digital ( the SD), flash memory, memory stick, or may be used to carry or store computer program code (executable form of a computer program), or any other medium instruction data. 控制系统42还可包含存储器的只能访问控制系统42的一部分。 Further comprising a memory access control system only a part of the control system 42 42.

[0041] 在图示的实施方式中,加油机34具有底部44和顶部46,顶盖(canopy) 48由两个侧板50支撑。 [0041] In the illustrated embodiments, the dispenser 34 with 46, a cap (canopy) 48 50 supported by two side plates 44 and the top bottom. 加油机34被细分成多个隔室。 Dispenser 34 is subdivided into a plurality of compartments. 在这方面,液压区域52包围液压部件,而电子区域54包围电子元件。 In this regard, the region 52 surrounding the hydraulic components of the hydraulic and the electronic area 54 surrounds electronics. 蒸汽屏蔽层可用于分离液压区域52与电子区域54。 Vapor barrier layer may be used to separate the hydraulic region 52 and the electronic area 54.

[0042] 用于控制燃料流的若干部件可容纳在液压区域52内。 Several members [0042] for controlling fuel flow can be accommodated in the hydraulic region 52. 来自UST 36的燃料通过管道网络被栗送到入口管56中。 Fuel from the UST 36 through a piping network is sent to the inlet pipe 56 Li. 被分配的燃料通过响应于流速或体积的仪表58。 It is assigned in response to a fuel flow rate or volume meter 58. 位移传感器60 (例如,脉冲发生器)用来响应于通过仪表58的燃料流而产生信号。 Displacement sensor 60 (e.g., a pulse generator) for generating a signal in response to the flow of fuel through the meter 58. 指示被分配的燃料流的信号经由控制线62被提供给控制系统42。 A signal indicative of the assigned fuel flow 62 is supplied to the control system 42 via a control line. 控制/数据线62可向阀64提供控制信令,使之可打开和关闭以允许或不允许进行燃料的分配。 Control / data line 62 may provide control signaling to the valve 64, so that it can be opened and closed to allow or disallow dispensing fuel.

[0043] 来自传感器60的仪表流量测量结果由控制系统42收集。 [0043] The measurements from the flow meter sensor 60 is collected by the control system 42. 控制系统42通常也执行如与燃料分配交易相关联的成本的计算。 Control system 42 also typically perform calculations such as cost associated with a fuel dispensing transaction. 此外,控制系统42在加油机34处控制交易处理,这将在下面更详细地描述。 Further, the transaction control system 42 controls the processing in dispenser 34, as will be described in more detail below.

[0044] 随着分配交易的进行,然后燃料输送到软管66并通过喷嘴68进入客户的车辆。 [0044] As the dispensing transaction, then the fuel delivered to the nozzle 68 through the hose 66 and into the customer's vehicle. 加油机34包含喷嘴护罩70,其可用来在不使用时存放和保持喷嘴68。 Dispenser 34 includes a nozzle guard 70, which may be used to store and hold the nozzle 68 when not in use. 喷嘴护罩70可包含机械或电子开关,以指示此时管嘴68已针对燃料分配请求而移除并且此时喷嘴68已被替换,标志着燃料供给交易的结束。 The nozzle guard 70 may include a mechanical or electronic switch 68 to indicate that at this time the nozzle is removed for a fuel dispensing nozzle 68 and at this time the request has been replaced, marking the end of the fuel supply transactions. 控制线提供了从电子开关到控制系统42的信令路径。 A control line provided to switch control from the electronic signaling path 42. 控制系统42可使用经由控制线接收的信令,以便确定关于交易已经启动或完成的时刻。 The control system 42 may use the received signaling via a control line, to determine the on time of the transaction has been initiated or completed.

[0045] 控制/数据线72提供了控制系统42和用户接口74之间的电子通信。 [0045] The control / data line 72 and control system 42 provides electronic communication between the user interface 74. 用户接口74包含子系统的各种组合,以方便客户与加油机34的互动以及接受对所分配燃料的支付。 The user interface subsystem comprising various combinations of 74, to facilitate interaction with the dispenser 34 and the client accepts payment for the fuel dispensed. 前盖76在接口74的各个子系统周围充当唇缘。 The front cover 76 acts as a lip 74 around each subsystem interface. 在大多数情况下,前盖76与加油机的表面齐平;然而,在一些实施方式中,它可以从表面向外延伸,在效果上形成凸起的唇缘。 In most cases, the surface of the front cover 76 is flush dispenser; In some embodiments, however, it may extend outwardly from the surface, forming a raised lip in effect. 前盖76还可包括框起或容纳各个子系统或部件的多个区段。 The front cover 76 may further include a housing receiving a plurality of sections or from individual components or subsystems.

[0046] 如图所示,用户接口74包含若干输入设备。 [0046] As shown, the user interface 74 comprises a plurality of input devices. 例如,用户接口74可包含小键盘78。 For example, the user interface 74 may comprise a keypad 78. 如果客户使用借记卡来支付燃料或其它商品或服务,则小键盘78通常用于输入PIN码。 If customers use a debit card to pay for fuel or other goods or services, the keypad 78 typically used to enter the PIN. 在优选的实施方式中,小键盘78可以是由Gilbarco公司提供的FlexPay™加密PIN键盘。 In a preferred embodiment, the keypad 78 may be provided by the company Gilbarco FlexPay ™ encrypted PIN pad. 用户接口74 还可包含安全卡读取器80,用于接受信用卡、借记卡或其它芯片或磁条卡的支付。 The user interface 74 may also include a security card reader 80 for receiving payment credit card, debit card or other chip or magnetic stripe cards. 此外,安全卡读取器80可接受忠诚度或特定程序卡片。 In addition, the security card reader 80 or a pharmaceutically loyalty card specific program.

[0047] 用户接口74还可包含其它输入设备,诸如非接触式卡片读取器82 (例如,用于集成电路或“智能”卡)。 [0047] The user interface 74 may also include other input devices, such as a contactless card reader 82 (e.g., for an integrated circuit or "smart" card). 另外,用户接口74可包含其它支付或交易设备,诸如账单接受器84、收据打印机86以及零钱输送设备88。 Further, the user interface 74 may include other payment or transaction device, such as a bill acceptor 84, a receipt printer 86 and delivery device 88 change. 收据打印机86可向客户提供在加油机34处进行的交易收据。 The receipt printer 86 can provide a transaction receipt carried out in tanker 34 to the customer. 零钱输送设备88可因多付而向客户提供零钱。 Change the delivery device 88 may be due to pay and provide change to customers. 也可以设想诸如光学读取器和生物特征读取器等其它交易设备。 It is also contemplated, such as optical reader and biometric readers and other transaction device.

[0048] 显示器90可用于向客户显示信息,诸如与交易相关的提示和广告。 [0048] Display 90 may be used to display information, such as tips and advertising related to the transaction to the customer. 在一些实施方式中,触摸屏可以用于显示器90。 In some embodiments, the touch screen display 90 may be used. 在这种情况下,例如,显示器90可构造为显示虚拟小键盘, 用于接收支付数据,诸如借记卡的PIN码或信用卡的账单邮编。 In this case, for example, display 90 may be configured to display a virtual keypad, for receiving the payment data, such as a PIN code or credit card debit card billing zip code. 显示器90也可用于从客户接收关于所显示信息的选择。 Display 90 may also be used to receive selection information from the client on the display.

[0049] 客户可使用软键92对经由显示器90呈现给用户的信息请求作出响应。 [0049] The client may respond to the information request using the soft keys presented to the 92 user via the display 90. 可提供内线94,以产生给客户的声音提示并允许客户与话务员交互。 Available inside 94 to produce the voice prompts to the customer and allows customers to interact with the operator. 此外,加油机34可包含交易价格总显示器96,其向客户呈现所分配燃料的价格。 In addition, the tanker 34 may contain a total transaction price display 96, which presents the distribution of fuel prices to customers. 交易加仑总显示器98可用于向客户呈现以加仑或升为单位的所分配燃料的测量结果。 98 gallons total transaction display for presenting the measurement result can be allocated to the fuel gallons or liters to customers. 辛烷值选择按钮100可提供给客户,以在启动分配之前选择哪个等级的燃料要被分配。 Octane selection buttons 100 may be provided to the customer, to what level of fuel selection before starting the allocation to be allocated. 最后,可提供每单位价格(PPU)显示器102,以显示每单位所分配燃料(或者为加仑或者为升)的价格,这取决于加油机34的编程。 Finally, the price per unit can be provided (PPU) display 102 to show the distribution of fuel per unit (or in gallons or liters) of prices, depending on the programming of the dispenser 34.

[0050] 如上所述,本发明的实施方式涉及用于检测未经授权地拆除或篡改一个或多个输入设备的传感器。 [0050] As described above, embodiments of the present invention relate to detecting unauthorized removal or tampering with one or more sensor input devices. 例如,一些实施方式提供一种可用于在卡片读取器处检测篡改的柔性电路组件。 For example, some embodiments may be used to provide a flexible circuit assembly to detect tampering with the card at the reader. 在这方面,图3A是安全卡读取器输入设备110的侧视图,而图3B是安全卡读取器110 的前视图。 In this regard, FIG. 3A is a side view of a security card reader input device 110, and FIG. 3B is a front view of a security card reader 110. 虽然本发明的一些实施方式参考卡片读取器110描述如下,但本领域技术人员将意识到,本发明可与任何合适的输入设备一起使用。 While some embodiments of the present invention, a card reader 110 with reference to the following description, those skilled in the art will appreciate that the present invention may be used with any suitable input device.

[0051] 卡片读取器110可包括双面读取头112,用于从可插入到读取槽114中的诸如磁条或EMV卡的支付卡接收信息。 [0051] The card reader 110 may include a double-sided reading head 112 for receiving information from a read can be inserted into the slot 114, such as a magnetic stripe card or payment card EMV. 卡片读取器110可进一步包括壳体116,其含有卡片读取器电子器件(在下文中更详细地描述)和至少一个输入-输出(“I/O”)端口118,用于接收和加载加密密钥。 Card reader 110 may further comprise a housing 116, a card reader comprising the electronic device (described in more detail below) and at least one input - output ( "I / O") port 118, for receiving and load an encryption key. 在目前优选的实施方式中,安全卡读取器110可类似于由GiIbarCO公司提供的MagTek^PermaSeal安全卡读取器或FlexPay™安全卡读取器。 In a presently preferred embodiment, the security card reader 110 may be similar MagTek ^ PermaSeal security card reader or card reader FlexPay ™ security GiIbarCO provided by the company.

[0052] 正如将要意识到的,卡片读取器110可构造为与加油机的前盖一起安装,诸如上述的前盖76。 [0052] As will be appreciated, a card reader 110 may be configured to cover the front of the dispenser installed with the front cover 76, such as a. 因此,卡片读取器110可限定前表面120和布置在前表面120之后的凸缘122。 Thus, the card reader 110 may define a front surface 120 and the flange 122 is disposed after the front surface 120. 在安装之后,前表面120与前盖的前表面齐平,且凸缘122邻接前盖的后表面。 After installation, the front surface 120 and the front surface of the front cover of the flush, and the rear surface of the front flange 122 adjacent to the cover. 因为凸缘122比前表面120限定更大的面积,所以凸缘122防止卡片读取器110从前盖的前面拆除,并为壳体116中的电子器件提供天气保护措施。 Because the flange 122 than the front surface 120 defining a larger area, so that the flange 122 prevents the front cover 110 in front of a card reader removed, and to provide weather protection for the housing 116 of the electronic device.

[0053] 支架可优选地用于将卡片读取器110固定至前盖,但是应设想其它的安装方法。 [0053] The bracket may preferably be used for the card reader to the front cover 110 is fixed, it should be contemplated that other installation methods. 如图3A所示,卡片读取器110可优选地在壳体116和凸缘122之间关于其周界限定间隙124。 3A, the card reader 110 may be preferably between the housing 116 and the flange 122 on its perimeter a given gap 124. 间隙124的大小做成接收薄的U形支架,其通过摩擦配合可拆卸地附接至卡片读取器110。 Size of the gap 124 is made of a thin U-shaped receiving bracket, which fit removably attached to the card reader 110 by friction. 支架可优选地具有比凸缘122的面积更大的面积,并限定多个孔。 Stent may preferably have a larger area than the area of ​​the flange 122 and defines a plurality of holes 孔的尺寸可做成接收安装螺钉或其它紧固件。 The pore size can be made receiving mounting screws or other fasteners. 当支架联接到前盖时,凸缘122压向前盖的后表面,以确保卡片读取器110就位。 When the bracket is coupled to the front cover, the rear surface of the front cover of the pressure flange 122 to ensure that the card reader 110 in place.

[0054] —般情况下,根据本发明的实施方式,柔性电路组件可联接在输入设备与输入设备所安装到的结构之间。 [0054] - Under normal circumstances, according to an embodiment of the present invention, the flexible circuit assembly may be coupled between the input device and the input device to the mounting structure. 可优选地,在安装期间施加到柔性电路组件的压力致动柔性电路组件的层中的至少一个开关,以完成拆除检测电路。 It may preferably be, during installation pressure applied to the flexible circuit assembly actuation layer flexible circuit assembly of at least one switch to complete the removal detection circuit. 因此,当在试图危及设备期间设备被拆除时,将打开拆除检测电路。 Thus, when attempting to compromise the device when the device is removed during the removal detection circuit opens. 输入设备(或安装在该结构中的另一相关联设备)可优选地设置有与柔性电路组件电子通信的篡改响应电子器件,以检测拆除的企图并采取适当的行动来防止欺诈。 The input device (or another device mounted in the associated structure) may preferably be provided with a tamper in electronic communication with the flexible circuit assembly of an electronic device in response to detecting an attempt to dismantle and to take appropriate action to prevent fraud.

[0055] 取决于所讨论的输入设备和将它安装到结构上的方法,本发明的柔性电路组件可在许多不同位置与输入设备联接。 [0055] depends on the input device discussed install it onto a structure, the flexible circuit assembly of the present invention may be coupled to the input device and in many different positions. 但是,通过举例的方式,图4是构造为用于安全卡读取器110的柔性电路组件126的前视图。 However, by way of example, FIG. 4 is configured as a security card reader 126 of the flexible circuit assembly 110 is a front view. 如下所述,柔性电路组件126可包括两个或更多个层,并经由电缆128和连接器130与卡片读取器110中的安全区域电连通。 As described below, the flexible circuit assembly 126 may include two or more layers, and communicates via the security zone 128 and electrically connected to the cable 130 and the card reader 110. 在图示的实施方式中,柔性电路组件126限定了孔132,其尺寸做成接收超过卡片读取器110的前表面120。 In the illustrated embodiment, the flexible circuit assembly 126 defines an aperture 132, sized to exceed the received card reader 110 the front surface 120. 因此,例如在制造期间,柔性电路组件126可利用合适的粘合剂固定到凸缘122。 Thus, for example, during manufacture, the flexible circuit assembly 126 using a suitable adhesive may be secured to the flange 122.

[0056] 当卡片读取器110固定到加油机前盖时,柔性电路组件126可压缩在凸缘122和前盖的后表面之间。 [0056] When the card reader 110 is fixed to the dispenser front cover, a compressible flexible circuit assembly 126 between the flange 122 and the rear surface of the front cover. 如下所述,作用在柔性电路组件126上的这个压力可优选地使布置在柔性电路组件126层中的一个或多个开关闭合。 As described below, the pressure acting on the flexible circuit assembly 126 can preferably be arranged so that the flexible circuit assembly 126 in a layer or a plurality of switch closure. 这里,示意性地示出了四个这样的开关134。 Here, schematically shows four such switches 134.

[0057] 图5是示出根据本发明实施方式的柔性电路组件126的层的分解透视图。 [0057] FIG 5 is an exploded perspective view of layers of flexible circuit assembly 126 embodiment of the present invention is shown. 特别地, 柔性电路组件126可优选地包括外层136和第一内层138。 In particular, the flexible circuit assembly 126 may preferably comprise a first inner layer 138 and outer layer 136. 此外,如图所示,柔性电路组件126 的一个或更多个层可具有限定电缆128的部分。 Further, as shown, a flexible circuit assembly 126 may have one or more layers defining a portion of the cable 128. 然而,电缆128也可以分开设置。 However, the cable 128 may be provided separately. 第一内层138可布置在输入设备和外层136之间。 The first inner layer 138 may be disposed between the outer layer 136 and the input device. 层136、138可优选地包括合适的薄的、挠性绝缘的衬底,诸如聚对苯二甲酸乙二醇酯(PET)或聚酰亚胺。 Layer 136, 138 may preferably comprise a suitable thin, flexible dielectric substrate such as polyethylene terephthalate (PET) or polyimide. 在一个实施方式中,柔性绝缘衬底可包括由DuPont提供的Kapton®聚酰亚胺膜。 In one embodiment, the insulating substrate may include a flexible Kapton® polyimide film supplied by DuPont. 合适的粘合剂诸如压敏粘合剂或其它粘合剂层用来连接层136、138。 Suitable adhesives such as pressure sensitive adhesive or other adhesive layers 136, 138 for connecting layer.

[0058] 外层136可优选地包括第一篡改响应导体电路140。 [0058] The outer layer 136 may preferably comprise a first tamper-responsive conductor circuit 140. 本领域技术人员熟悉篡改响应导体电路(有时被称为篡改响应“网(mesh)”)。 Those skilled in the art are familiar with tamper-responsive conductor circuit (sometimes referred to as tamper-responsive "net (mesh)"). 例如,篡改响应导体电路140可由一对印刷到外层136柔性衬底上的紧密间隔的导电图案142、144网格形成。 For example, tamper-responsive conductor circuit 140 may be one pair of closely spaced conductive pattern printed on the outer layer of the flexible substrate 142, the grid 136 is formed. (应当意识到的是,其它沉积技术可用于在柔性衬底上形成图案142、144。)导电图案142、144可由任何合适的导电材料诸如银或铜来形成,并沿着柔性衬底遵循蛇形路径。 (It should be appreciated that other deposition techniques may be used to form a pattern 142, 144 on a flexible substrate) conductive patterns 142, 144 may be any suitable conductive material such as silver or copper is formed, and follows along a flexible substrate snake shaped path. 此外,虽然为了清晰起见在图5中没有示出,但外层136可包括形成在篡改响应导体电路140上的不透明涂层或绝缘层。 Furthermore, although not shown for clarity in FIG. 5, but the outer layer 136 may include an opaque coating or insulating layer formed on the conductor circuit 140 in response to tampering. 使用不透明涂层可以进一步提高安全性,使之更难以确定如何破坏篡改响应安全特征。 An opaque coating may further enhance the safety, making it more difficult to determine how the security feature in response to tamper destruction.

[0059] 可优选地基本覆盖外层136的图案142、144开始并终止于连接器130。 [0059] The outer layer may preferably be substantially cover pattern 136 begins 142, 144 and terminate at the connector 130. 因此,篡改响应导体电路140可优选地适于与输入设备安全区域中的篡改响应电子器件电连通。 Thus, tamper-responsive conductor circuit 140 may preferably be adapted to an electronic device in electrical communication with the input device in response to tampering of the security zone. 另外,篡改响应导体电路在外层136的限定部分电缆128的部分上延伸,因此,篡改响应电子器件和柔性电路组件126之间的连接也被保护以防止篡改。 Further, in the tamper-responsive conductor circuit extending portion 136 defining the outer portion of the cable 128, therefore, the connection between the tamper-response electronic device and the flexible circuit assembly 126 is also protected against tampering. 本领域技术人员将意识到,在使用中, 篡改响应电子器件连续地监控导电图案142、144的一种或多种电气特性(诸如电阻或电压)。 Those skilled in the art will recognize that, in use, the tamper-response electronics continuously monitor the electrical characteristics of one or more (such as voltage or resistance) of the conductive patterns 142, 144. 图案142、144可优选地定位成使得篡改会造成图案142、144之一或两者或发生破裂或发生短路。 Pattern 142, 144 may preferably be positioned such that tampering will result in one or both of the pattern 142, 144 or short circuiting or rupture. 然后,篡改响应电子器件将检测到一个或多个电气特性发生变化,并采取适当的行动来防止欺诈,如设置报警和禁用输入设备或者擦除或覆盖输入设备的存储器。 Then, the electronic device will detect tampering in response to one or more electrical characteristics change, and to take appropriate action to prevent fraud, such as setting the alarm and disabling an input device, or to erase or overwrite memory input device.

[0060] 如上所述,柔性电路组件126可优选地包括一个或多个开关,其构造为当安装柔性电路组件126时被闭合。 [0060] As described above, the flexible circuit assembly 126 may preferably include one or more switches configured to flex when the mounted circuit assembly 126 is closed. 可优选地,这些开关布置在第一内层138中,并且功能为选择性地完成如下所述的拆除检测电路。 May preferably, these switches are arranged in a first inner layer 138, and functions to selectively complete removal detection circuit as described below. 虽然可以使用任何合适的开关,但开关最好可瞬时接触,按钮型设备通常会在薄膜开关中发现。 Although any suitable switch, but preferably may be a momentary contact switch, push-button type devices are typically found in the membrane switches. 如图所示,开关134可优选地类似于由威斯康星州密尔沃基的Xymox Technologies公司提供的薄膜开关。 As shown, switch 134 may preferably be similar to that provided by a membrane switch, Milwaukee, WI Xymox Technologies Corporation. 可替代地,在一些实施方式中,开关可布置在另一层中,如布置在外层136中。 Alternatively, in some embodiments, the switch may be disposed in another layer, as disposed in the outer layer 136.

[0061] 因此,例如,第一内层138的柔性衬底可包括印刷导体,其形成了在开关134的位置具有开触点的电路。 [0061] Thus, for example, flexible substrate 138 may include a first inner layer printed conductor, which forms a circuit with open contacts of switch 134 at the position. 第一内层138还可包括间隔层,以隔开含有导电焊盘等的第二柔性衬底与印刷有电路的衬底。 The first inner layer 138 may further include a spacer layer to separate the conductive pad or the like comprising a second flexible substrate with the printed circuit substrate. 虽然间隔层通常保持导电焊盘不与开触点的接触,但施加到开关134 的区域的压力使导电焊盘完成电路。 While the spacer layer is typically kept out of contact with the conductive pad contacts open, but the switch region 134 is applied to the pressure conductive pads complete the circuit. 在一些实施方式中,开关134可以是触觉的,并包括金属(例如,不锈钢)或聚酯圆顶。 In some embodiments, the switch 134 may be tactile, and includes a metal (e.g., stainless steel) or polyester domes. 关于合适的薄膜开关的结构的其它背景信息载于授予Parkinson的美国专利4217473和授予Kissner的4218600中,每个专利的全部内容通过引用并入本文用于所有目的。 Other background structures on suitable membrane switch information is contained in U.S. Patent 4,217,473 granted Parkinson and 4,218,600 granted Kissner, the entire contents of each of which are incorporated herein by reference for all purposes.

[0062] 虽然柔性电路组件126的一些实施方式可只包括外层136和第一内层138,但附加的篡改响应安全性可通过提供第二内层146 (可优选地由类似于层136和138的材料制成)而获得。 [0062] Although some embodiments of the flexible circuit assembly 126 may include only a first outer layer 136 and inner layer 138, additional tamper-response security by providing a second inner layer 146 (which may preferably be similar to the layer 136 and 138 made of a material) is obtained. 第二内层146可布置在第一内层138和固定到柔性电路组件126的输入设备之间。 Second inner layer 146 may be disposed between the first inner layer 138 and secured to the flexible circuit assembly 126 of the input device. 此夕卜,第二内层146可优选地包括由印刷导体150、152形成的第二篡改响应导体电路148。 Bu this evening, the second inner layer 146 may preferably comprise a printed conductor 150, a second tamper-responsive conductor circuit 148 is formed. 第二内层146和篡改响应导体电路148可优选地分别类似于第一内层136和篡改响应导体电路140。 Second inner layer conductor circuit 146 and 148 may be tamper-responsive preferably 136 are similar to the first inner conductor circuit 140 and the tamper-responsive. 此外,在一些实施方式中,篡改响应导体电路140、148可组合,以形成跨越多个层的单个篡改响应导体电路。 Further, in some embodiments, the tamper-responsive conductor circuit 140, 148 may be combined to form a single layer across the plurality of tamper-responsive conductor circuit.

[0063] 如上所述,在许多实施方式中,柔性电路组件126可优选地与输入设备的安全区域电连通。 [0063] As described above, in many embodiments, the secure area 126 may preferably be electrically with an input device in communication flex circuit assembly. 一般情况下,安全区域可以是篡改保护的物理外壳,用于输入设备的承载诸如加密密钥或客户账号等敏感信息的部件。 In general, the safety region may be tamper protection physical enclosure, it means for carrying the sensitive information such as customer account number or the encryption key input device. 因此,安全区域可由一个或多个篡改响应导体电路保护,和/或包裹在环氧树脂等之中。 Thus, the safety area may be one or more tamper-responsive conductor circuit protection, and / or encapsulated within an epoxy resin and the like. 关于用于输入设备的电子部件的安全区域的背景信息在Cohen等人的美国专利6853093中发现,其全部公开内容通过引用并入本文用于所有目的。 Background information on the safety area for electronic components found in the input device of Cohen et al., U.S. Patent No. 6,853,093, the entire disclosure of which is incorporated herein by reference for all purposes.

[0064] 更具体地,图6是与柔性电路组件126中的电路联接的卡片读取器110的示例性安全区域154的示意图。 [0064] More specifically, FIG. 6 is a schematic diagram of an exemplary security zone and a flexible circuit coupled to the circuit card assembly 126 in the reader 110 154. 如上所述,电缆128可优选地将电路与柔性电路组件126中的电子部件连接至安全区域154。 As described above, the cable 128 may preferably be connected to the electronic circuit components of the flexible circuit assembly 126 to a safe region 154. 除其它部件之外,安全区域154可容纳与至少一个存储器158电子通信的处理器156和篡改响应电子器件160。 In addition to other components, with the security zone 154 can receive at least a processor 156 and memory 158 tampering with electronic communication electronic device 160 in response. 如众所周知的,在功能上处理器156可执行加密,并控制对卡片读取器110的处理。 As is well known, the functional processor 156 may perform encryption, and control processing of the card reader 110. 存储器158可存储一种或多种类型的敏感信息,包含加密密钥或客户账户信息。 The memory 158 may store one or more types of sensitive information, including customer account information, or the encryption key.

[0065] 柔性电路组件126中的电路可与篡改响应电子器件160电连通。 [0065] The flex circuit assembly 126 may be in communication with a tamper-response circuit 160 is electrically electronics. 在上文已参考图5 描述了篡改响应导体电路140、148。 Above it has been described with reference to FIG tamper-responsive conductor circuit 140, 148. 如图6所示,内层138的开关134可优选地构造为选择性地完成拆除检测电路162。 6, inner layer 138 of switch 134 may preferably be configured to selectively complete removal detection circuit 162. 特别地,当卡片读取器110抵靠前盖安装时,作用在柔性电路组件126上的压力造成开关134闭合。 In particular, when the card reader 110 is mounted against the front cover, the pressure acting on the flexible circuit assembly 126 causes the switch 134 is closed. 然后,如果擅自企图拆除卡片读取器110,则可打开一个或多个开关134,中断拆除检测电路162并造成篡改响应。 Then, if the attempted unauthorized removal of the card reader 110, may open one or more switches 134, the interrupt detection circuit 162 and cause the removal tamper response. 所示开关134在拆除检测电路162中是串联连接,这只是为了便于说明,并且本领域技术人员将意识到,开关134可并联连接。 Switch 134 is shown connected in series in a removal detection circuit 162, this is merely for convenience of explanation, and those skilled in the art will appreciate that the switch 134 may be connected in parallel.

[0066] 图6还示出了位于内层138中的第二安全层,以保护不被注入的外界导体攻击。 [0066] FIG. 6 also shows a second security layer is the inner layer 138 in order to protect the conductor being injected outside attacks. 具体而言,通常打开的外界导体检测电路164布置在与拆除检测电路162相邻的内层138中。 Specifically, the normally open detection circuit 164 is arranged outside the conductor and the removal detection circuit 162 in the adjacent inner layer 138. 当试图危及输入设备时,篡改者可能试图将外界导体(诸如导电液体)注入到内层138中,使拆除检测电路162短路。 When attempting to compromise the input device, may attempt to tamper with the external conductor (such as a conductive liquid) is injected into the inner layer 138, 162 so that a short circuit removal detection. 然而,在这种情况下,电路164可优选地相对于拆除检测电路162定位, 使得如果篡改者试图在开关134周围创建短路,则外界导体也将接触电路164。 However, in this case, circuit 164 may preferably with respect to the removal detection circuit 162 is positioned so that if tampering attempts to create a short circuit around switch 134, the external conductor circuit 164 will be in contact. 这样的接触将完成电路164,并导致篡改响应。 Such contact 164 to complete the circuit and cause a tamper response.

[0067] 篡改响应电子器件160可优选地监控柔性电路组件126中电路的电气特性,并向处理器156提供输出。 [0067] The electronic device 160 may be tamper-response is preferably monitored electrical characteristics of the circuit of the flexible circuit assembly 126, and provides the output processor 156. 处理器156可确定所测量参数的变化是否指示篡改,比如参数超过预定阈值。 The processor 156 may determine whether the measured change in a parameter indicative of tampering, such as the parameter exceeds a predetermined threshold value. 如果指示了篡改,则处理器156可命令篡改响应电子器件160擦除和/或覆盖存储在存储器158中的数据。 If the indication of tampering, the processor 156 may instruct the electronic device 160 in response to tamper erase and / or overwrite data stored in the memory 158. 可替代地,处理器156可设定篡改标志,并禁用卡片读取器110,直到卡片读取器110由授权的维修人员“重新武装”。 Alternatively, the processor 156 can set the tamper flag, and disables the card reader 110, card reader 110 until by authorized service personnel "rearm."

[0068] 本领域技术人员将意识到,处理器156、存储器158和篡改响应电子器件160被示出为分立元件,这只是为了便于优选实施方式的描述。 [0068] Those skilled in the art will appreciate, processor 156, memory 158, and tamper-response electronics 160 are shown as discrete elements, this is merely for convenience of description of the preferred embodiment. 在其它实施方式中,任何或所有的这些元件可以不同地布置和/或组合,比如成为一个或多个集成电路。 In other embodiments, any or all of these elements may be arranged differently and / or combinations, such as for one or more integrated circuits.

[0069] 图7是根据本发明另一实施方式以局部截面示出的柔性电路组件200的平面图。 [0069] FIG. 7 is a plan view in partial cross-section of the flexible circuit assembly 200 is shown according to another embodiment of the present invention. 柔性电路组件200在许多方面类似于柔性电路组件126,并包括用于连接到输入设备安全区域的电缆202、外层204、第一内层206和第二内层208。 The flexible circuit assembly 200 is similar in many respects to the flexible circuit assembly 126, and includes a safety device connected to the cable input area 202, the outer layer 204, a first inner layer 206 and the second inner layer 208. 外层204和第二内层208分别包含篡改响应导体电路210、212。 A second outer layer 204 and inner layer 208, respectively 210, 212 comprises a tamper-responsive conductor circuit. 然而,在该实施方式中,柔性电路组件200具有比柔性电路组件126更小的物理尺寸,并包括位于第一内层206中的单个开关214。 However, in this embodiment, the flexible circuit assembly 200 having the flexible circuit is smaller than the physical size of assembly 126, and a first switch 214 includes a single inner layer 206.

[0070] 期望篡改者事先不知道他们正在尝试禁用的安全特征的位置,则这种实施方式可能是优选的。 [0070] expect tamper who do not know in advance that they are trying to disable the security features of the location, this embodiment may be preferred. 特别地,由于柔性电路组件200的小的物理尺寸,该设备可在制造过程中固定到输入设备的随机位置。 In particular, due to the small physical size of the flexible circuit assembly 200, the apparatus may be secured to a random position of the input device during the manufacturing process. 将意识到,柔性电路组件200的随机定位添加了要克服的额外安全特征。 It will be appreciated, a random positioning of the flexible circuit assembly 200 adds additional security features to overcome. 取决于不同的应用,理想的是使用具有单个输入设备的一个以上电路组件200,其相对于彼此随机布置。 Depending on the application, it is desirable to use more than one circuit component having a single input device 200, which is randomly arranged with respect to each other.

[0071] 图8A-8C示出了根据本发明另一实施方式的柔性电路组件300的各层。 [0071] FIGS. 8A-8C illustrate various layers in accordance with another embodiment of the flexible circuit assembly 300 of the embodiment of the present invention. 图8A是柔性电路组件300的第一层302、第二层304和第三层306的顶视图。 8A is a flexible circuit assembly 300, a first layer 302, second layer 304, and a top view of a third layer 306. 图8B是柔性电路组件300的第四层308的底视图。 FIG 8B is a bottom view of the flexible circuit assembly 300 of the fourth layer 308. 每个层302、304、306、308可优选地包括薄的、挠性绝缘的衬底,如同上文的层136、138—样。 Preferably each layer 302, 304 may comprise a thin, flexible dielectric substrate, layer 136,138- like as above. 也如上文所解释的,合适的粘合剂可用于连接各层302、304、306和308。 As also explained above, a suitable adhesive can be used to connect various layers 302, 304, and 308. 当组装时,各层302、304、306和308限定电缆310、连接器部分312和开关部分314。 When assembled, the layers 302, 304 and 308 define a cable 310, connector portion 312 and a switch portion 314. (为了清楚起见,用于电缆310、连接器部分312和开关部分314的附图标记仅相对于图8A中的第一层302示出。然而,将意识到,柔性电路组件300的这些元件还包括每个层304、306和308。) (For clarity, a cable 310, connector portion 312 and a switch portion 314 reference numerals shown in FIG. 8A with respect to only the first layer 302. However, it will be appreciated that these elements of the flexible circuit assembly 300 further 304, 306 and 308. each layer comprises a)

[0072] 第一层302和第三层306可优选地包括篡改响应导体电路316,类似于上述篡改响应导体电路140、148、210和212。 [0072] The first layer 302 and third layer 306 may preferably comprise a tamper-responsive conductor circuit 316, similar to the above-described tamper-responsive conductor circuits 140,148,210 and 212. 将意识到,为清楚起见,篡改响应导体电路316在图8A中仅部分示出。 It will be appreciated, for clarity, tamper-responsive conductor circuit 316 only partially shown in FIG. 8A. 更具体地,在第三层306中,篡改响应导体电路316可包括导电迹线,其基本上覆盖第三层306并在连接器部分312中的过孔318和终点320之间延伸。 More specifically, in the third layer 306, a tamper-responsive conductor circuit 316 may include conductive traces, which substantially covers the third layer 306 and extends in the connector portion 312 between the end 320 and through holes 318. 设置在第二层304中终点320之上的是过孔322,使得篡改响应导体电路316可通过第二层304到达第一层302。 Layer disposed on the second end 304 of the vias 320 is 322, so that the tamper-responsive circuit 316 through the second conductor layer 304 reaches the first layer 302. 在那里,篡改响应导体电路316可从过孔324延伸,这允许与第三层306中的导电迹线电气连接, 以基本上覆盖第一层302。 There, tamper-responsive conductor circuit 316 may extend from the via 324, allowing electrical connection to the conductive trace in the third layer 306, to substantially cover the first layer 302.

[0073] 在该实施方式中,开关326可设置在第一层302中。 [0073] In this embodiment, the switch 326 may be disposed on the first layer 302. 优选地类似于开关134和214的开关326可选择性地完成通常打开的拆除检测电路328,导电迹线330为此可布置在第二层304中。 Preferably, switches 134 and 214 similar to the switch 326 selectively complete removal detection circuit 328 normally open, electrically conductive traces 330 may be disposed in the second layer 304 for this purpose. 开关326可包含与金属圆顶334 (见图9)周界接触的导电焊盘332。 326 switch may comprise a conductive pad and a metal dome 334 (see Fig. 9) contacting perimeter 332. 当按下金属圆顶334时,它接触另一导电焊盘336,以闭合拆除检测电路328。 When the metal dome 334 is pressed, it contacts another conductive pads 336, 328 to close the removal detection circuit. 特别地,在第二层304中,导电迹线330在连接器部分312中的过孔338和开关部分314中的过孔340之间延伸。 In particular, the second layer 304, conductive traces 330 extends between the holes 340 in the connector portion 312 through hole 338 and the switch portion 314 through. 在第一层302 中,开关326借助过孔342与迹线330电连通。 In the first layer 302, the switch 326 by vias 342 and 330 communicate electrical traces.

[0074] 现在参照图8B,第四层308是柔性电路组件300的底层,并可优选地包括多个位于连接器部分312中的触点,用于与印刷电路板344 (见图9)上的对应触点电连通。 [0074] Referring now to Figure 8B, the fourth layer 308 is the bottom of the flexible circuit assembly 300, and preferably includes a plurality of contacts positioned in the connector portion 312, for the printed circuit board 344 (see FIG. 9) corresponding contacts of the communication. 例如,第四层308可包括借助过孔318与篡改响应导体电路316电连通的四个触点346。 For example, the fourth layer 308 may comprise means of electrical circuit 316 via conductors 318 and four contact tamper-response communication 346. 另外,第四层308 可包括两个触点348,借助第三层306中的过孔350和第二层304中的过孔338与拆除检测电路328的导电迹线330电连通。 Further, the fourth layer 308 may include two contacts 348, by vias 338 and removal detection circuit 328 of the third conductive trace layer 306 through the holes 350 and the second layer 304 of communication wires 330. 此外,第四层308可包括围绕焊盘346、348的接地端子352。 In addition, the fourth layer 308 may comprise ground terminals 346, 348 around pad 352. 最后,第四层308可包括铜平面354。 Finally, the fourth layer 308 may include copper plane 354. 正如本领域普通技术人员将意识到的,铜平面354可用于屏蔽对篡改响应导体电路316和拆除检测电路328的X射线观察。 As one of ordinary skill in the art will appreciate, the plane 354 may be used to shield the copper X-ray observed conductor 316 and the removal detection circuit circuit 328 in response to tampering.

[0075] 此外,依照柔性电路组件300的替代实施方式,图8C是可添加在第一层302顶部的可选第五层356的顶视图。 [0075] Further, in accordance with an alternative embodiment of the flexible circuit assembly 300 of the embodiment, FIG. 8C is an optional 302 can be added on top of the first layer is a top view of a fifth layer 356. 如同第四层308—样,第五层356可包括铜平面358。 As 308- comp fourth, fifth layer 356 may comprise copper plane 358. 然而,如图8C 所示,提供了第五层356,类似于开关326的开关可布置在该层中,而不是布置在第一层302 中(这将仍然包括篡改响应导体电路316)。 However, as shown in FIG. 8C, a fifth layer 356, similar to the switch 326 switch may be disposed in the layer, but not the first layer 302 is disposed (which will still include a tamper-responsive conductor circuit 316). 铜平面358借助合适的过孔(在图8C中未示出)接地。 Copper plane 358 by means of suitable through holes (not shown in FIG. 8C) is grounded.

[0076] 值得注意的是,在柔性电路组件300的优选实施方式中,开关部分314形成为防篡改“壳”的两个半部360、362。 [0076] It is noted that, in the preferred embodiment of the flexible circuit assembly 300 of the embodiment, the switch portion 314 is formed to be tamper resistant "shell" of the two halves 360, 362. 更具体地,半部360、362在该实施方式中为方形,但它可以是任何合适的形状,半部360、362可通过铰链部分364连接。 More specifically, it halves 360, 362 in this embodiment is rectangular, but it may be of any suitable shape, halves 360, 362 may be connected by a hinge portion 364. 在制造过程中,在将金属圆顶334插入于焊盘332、336上之后,半部360可在铰链部分364处折叠并利用合适的粘合剂固定于相应的半部362上。 In the manufacturing process, after the insertion of the metal dome 334 to the pad 332, 336, 360 may be folded halves of the hinge portion 364 and fixed using a suitable adhesive 362 on the respective halves. (也参见图9)。 (See also FIG. 9). 因此,开关326可嵌入在防篡改壳中,这提供了额外的安全性。 Thus, switch 326 may be embedded in the tamper-resistant housing, which provides additional security. 特别地,由于篡改响应导体电路316,任何企图打开或接触该防篡改“壳”将中断电路316,导致篡改响应。 In particular, since the conductor circuits 316 tamper-responsive, or any attempt to open contacts of the tamper resistant "shell" to the interrupt circuit 316, resulting in tamper response. 换句话说,一旦开关326被“武装”,它在没有触发篡改响应的情况下就不能被禁用。 In other words, once the switch 326 is "armed", in which case there is no tampering in response to the trigger can not be disabled.

[0077] 图9是示出将柔性电路组件300附接至印刷电路板344的示意性侧视图。 [0077] FIG. 9 is a diagram illustrating the flexible circuit assembly 300 is attached to a schematic side view of the printed circuit board 344. 如众所周知的,印刷电路板344可优选地包括具有篡改响应导体电路的至少两层,其设置在电路板344上的电路之上和之下。 As is well known, printed circuit board 344 may preferably comprise at least two layers having a tamper-responsive conductor circuit provided on the circuit on the circuit board 344 and below. 因此,像柔性电路组件300中的电路一样,印刷电路板344上的电路被完全保护,以防止篡改。 Thus, the flexible circuit assembly 300 like the circuit, as a circuit on a printed circuit board 344 is fully protected from tampering. 另外,印刷电路板344可优选地还包括安全区域,该安全区域包括篡改响应电路,可类似于上面详细描述的安全区域154。 Further, preferably 344 may be a printed circuit board further includes a safety zone, which comprises a tamper security zone responsive circuit may be similar to the security zone 154 described in detail above. 在印刷电路板344中,用于拆除检测电路328的导体可优选地从该安全区域延伸到将柔性电路组件300的连接器部分312附接至印刷电路板344的位置。 In the printed circuit board 344, the circuit 328 for detecting the removal of the conductor may preferably extend from the secure area to the connector portion 300 of the flexible circuit assembly 312 connected to the attachment position of the printed circuit board 344.

[0078] 更具体地,连接器部分312可使用导电性粘合剂364在期望的位置(在图9中由箭头指示)固定到电路板344。 [0078] More specifically, the connector portion 312 may be a conductive adhesive 364 at a desired position (indicated by arrows in FIG. 9) is fixed to the circuit board 344. 由此,任何试图从电路板344拆除柔性电路组件300将断开篡改响应导体电路316和/或打开经由导电性粘合剂364完成的电路,从而导致篡改响应。 Thus, any attempt to remove the flexible circuit assembly 300 to disconnect the tamper-responsive conductor circuit 316 and / or opening an electrical circuit is completed through the conductive adhesive 364, thereby causing the tamper respondent from the circuit board 344. 本领域技术人员熟悉合适的导电性粘合剂364,其可优选地允许传导穿过其厚度,但不能横跨其表面。 Familiar to those skilled in the art suitable conductive adhesive 364, which may preferably allow conduction through its thickness, but not across its surface.

[0079] 因此,一旦由篡改响应导体电路316上下保护的拆除检测电路328使用导电性粘合剂364与由篡改响应导体电路层上下保护的印刷电路板344中的相应导体相连接,则用于拆除检测电路328的信号通过“安全通道”在开关326和电路板344的安全区域之间传递。 [0079] Thus, once the upper and lower guard conductor circuit 316 by the tamper detection circuit 328 in response to the removal of a conductive adhesive 364 is connected to a respective conductor and a printed circuit board 344 of the upper and lower conductor circuit layer is protected by a tamper-responsive, is used removal detection circuit 328 a signal "safe path" is transmitted by switch 326 between the safe region 344 and the circuit board. 另外, 使用导电性粘合剂364将柔性电路组件300附接至印刷电路板344增加了安装灵活性。 Further, a conductive adhesive 364 to the flexible circuit assembly 300 is attached to a printed circuit board 344 increases installation flexibility. 例如, 只要在印刷电路板344内用于拆除检测电路328的电路由篡改响应导体电路层保护,则柔性电路组件300可安装在印刷电路板344上的任何地方。 For example, removal detection circuit 328 for as long as a circuit conductor circuit layer is protected by a tamper-responsive within the printed circuit board 344, the flexible circuit assembly 300 may be mounted on the printed circuit board 344 anywhere. 换言之,由于在柔性电路组件300和电路板中由篡改响应导体电路提供的保护,在因提供额外篡改保护而设计的位置如在金属壳体下面没有必要安装柔性电路组件300。 In other words, since the flexible circuit board assembly 300 and the protection provided by a tamper-responsive conductor circuit, such as no need to install the flexible circuit assembly 300 at a position below the metal housing for providing additional tamper protection and design.

[0080] 如上所述,在本发明的一些实施方式中,篡改响应电子器件可位于柔性电路组件保护的输入设备中。 [0080] As described above, in some embodiments of the invention, the tamper-response input device electronics positioned flexible circuit assembly may be protected. 然而,这不是必须的情况。 However, this is not necessarily the case. 依照本发明的柔性电路组件可保护一个输入设备,但与另一设备中的篡改响应电子器件电连通。 The flexible circuit assembly in accordance with the present invention may protect an input device, but another electronic device in electrical communication in response to tampering. 这允许柔性电路组件以许多不同的构造与可设置在用户接口(如上述用户接口74)中的任何设备一起使用。 This allows the flexible circuit assembly in many different configurations and may be provided in a user interface (user interface 74 as described above) for use with any device.

[0081] 例如,图10是与小键盘366和显示器368—起使用的柔性电路组件300的透视图。 [0081] For example, FIG. 10 is a keypad and a display 368- 366 from the flexible circuit assembly 300 using a perspective view. 小键盘366和显示器368可类似于小键盘78和显示器90,并因此可构造为与加油机的前盖(如前盖76) —起安装。 The keypad 366 and display 368 may be similar to a keypad 78 and display 90, and thus may be configured with the front cover of the dispenser (such as front cover 76) - from the installation. 这里,小键盘366与电路板344联接,在对应于小键盘366金属壳体中的开口370的位置将连接器部分312附接至电路板344。 Here, a keypad 366 and coupled to the circuit board 344, a keypad 366 corresponding to the location of the opening in the metal housing 370 of the connector portion 312 is attached to the circuit board 344. 然而,柔性电路组件300的开关部分314联接到显示器368的框架372,其邻接前盖的后表面或内表面。 However, the switch portion 300 of the flexible circuit assembly 314 is coupled to the frame 372 of the display 368, adjacent the front cover of the rear or inner surface. 当小键盘366和显示器368安装在前盖中时,开关部分314可“夹”在框架372和前盖之间,以闭合开关326。 When the keypad 366 and a display 368 installed in the front cover, the switch part 314 may be "sandwiched" between the frame and the front cover 372, 326 to close the switch. 因此,如果显示器368被篡改,会造成拆除检测电路328打开,与小键盘366相关联的电路板344上的篡改响应电子器件将产生篡改响应。 Accordingly, if the display 368 is tampered with, a detection circuit 328 will cause the removal opening, the electronic device will produce a response to tamper with the tamper on the circuit board 344 the keypad 366 is associated response.

[0082] 虽然上文已经描述了本发明的一个或多个优选实施方式,但应当理解,本发明的任何和所有等效实现方案包含在其范围和精神内。 [0082] While the foregoing has described the present invention, one or more preferred embodiments, it is to be understood that any and all equivalent realizations of the present invention are included within its spirit and scope. 所描述的实施方式仅作为示例的方式给出,并非旨在作为对本发明的限制。 The embodiment described by way of example only, and are not intended as a limitation on the present invention. 因此,本领域普通技术人员应该理解,因为可以作出修改,所以本发明并不限于这些实施方式。 Accordingly, those of ordinary skill in the art should be understood, since modifications can be made, the present invention is not limited to these embodiments. 因此,可以设想的是,任何和所有这样的实施方式包含在本发明中,只要可落入其范围和精神内即可。 Thus, it is contemplated that any and all such embodiments are included in the present invention, as long as it falls within the scope and spirit of the can.

Claims (20)

1. 一种用于检测未经授权的拆除或篡改的系统,所述系统包括: 印刷电路板,具有篡改响应电子器件;和柔性电路组件,限定连接器部分、开关部分和在所述连接器部分和所述开关部分之间延伸的电缆,所述柔性电路组件在所述连接器部分处与所述印刷电路板联接; 所述柔性电路组件包括: 多个层,每个层包括柔性绝缘衬底; 布置在所述开关部分中的开关,所述开关经由导电路径与所述印刷电路板的所述篡改响应电子器件电连通;和包围所述导电路径的篡改响应导体电路,所述篡改响应导体电路与所述印刷电路板的所述篡改响应电子器件电连通。 1. A method for detecting unauthorized removal or tampering, the system comprising: a printed circuit board, having a tamper-response electronics; assembly and a flexible circuit, defining a connector portion, a switch portion and said connector cables extending between said portion and the switch portion, said flexible circuit assembly and said connector portion of said printed circuit board is coupled; said flexible circuit assembly comprising: a flexible substrate a plurality of insulating layers, each layer comprising bottom; switch disposed on the switch portion, the tamper switch in response to the electronic device via a conductive path in electrical communication with the printed circuit board; and a conductive path surrounding the tamper-responsive conductor circuit, in response to said tamper the conductor circuit of the printed circuit board in electrical communication with an electronic device in response to tampering.
2. 根据权利要求1所述的系统,其中,所述开关、所述导电路径和所述篡改响应电子器件包括拆除检测电路,当所述开关部分安装在用户接口设备和一结构之间时,所述拆除检测电路闭合。 2. The system according to claim 1, wherein said switch, and said electrically conductive path in response to said electronic device comprises a tamper-removal detection circuit, when the switch section is mounted between a user interface device and a structure, the removal detection circuit is closed.
3. 根据权利要求2所述的系统,其中,所述印刷电路板不位于所述用户接口设备中。 3. System according to claim 2, wherein the printed circuit board is not located in the user interface device.
4. 根据权利要求2所述的系统,其中,所述开关是薄膜开关。 4. The system of claim 2, wherein the switch is a membrane switch.
5. 根据权利要求1所述的系统,所述柔性电路组件还包括至少一个铜平面,以屏蔽对所述篡改响应导体电路和所述导电路径的检查。 5. The system according to claim 1, said flexible circuit assembly further comprises at least a copper plane, tamper-responsive to shield the conductor circuit and the inspection of the conductive paths.
6. 根据权利要求5所述的系统,还包括第一铜平面和第二铜平面,所述第一铜平面和第二铜平面布置在所述篡改响应导体电路和所述导电路径上方和下方。 6. A system as claimed in claim 5, further comprising a first and a second planar copper copper plane of the first and second copper copper plane layout in response to said tamper conductor circuit and said upper and lower conductive paths .
7. 根据权利要求1所述的系统,其中,所述开关部分包括由铰链部分相连接的第一半部和第二半部。 7. The system according to claim 1, wherein said switch portion comprises a first and second halves by the hinge connecting portion.
8. 根据权利要求7所述的系统,其中,所述开关部分折叠在所述铰链部分处,并且所述第一半部固定在所述第二半部上。 8. The system according to claim 7, wherein the switch portion is folded at said hinge portion, and the first half fixed to the second half.
9. 根据权利要求7所述的系统,其中,所述开关布置在所述开关部分的所述第一半部和第二半部之间。 9. The system of claim 7, wherein the switch is disposed between the switch portion of said first and second halves.
10. 根据权利要求1所述的系统,其中,所述柔性电路组件使用导电性粘合剂与所述印刷电路板联接。 10. A system according to claim 1, wherein the flex circuit assembly using a conductive adhesive coupling the printed circuit board.
11. 一种检测未经授权的拆除或篡改的方法,所述方法包括的步骤有: 提供具有篡改响应电子器件的印刷电路板; 提供柔性电路组件,所述柔性电路组件包括: 开关部分,包括连接器部分、开关部分和在所述连接器部分和所述开关部分之间延伸的电缆; 所述开关部分包括由铰链部分相连接的第一半部和第二半部; 多个层,每个层包括柔性绝缘衬底; 布置在所述开关部分中的开关,所述开关经由导电路径与所述印刷电路板的所述篡改响应电子器件电连通;和包围所述导电路径的第一篡改响应导体电路,所述第一篡改响应导体电路与所述印刷电路板的所述篡改响应电子器件电连通; 在所述连接器部分处将所述柔性电路组件安装到所述印刷电路板;以及在所述铰链部分处折叠所述开关部分,并且将所述第一半部固定在所述第二半部上以将所述开关嵌入 11. A method of detecting unauthorized removal or tampering, said method comprising the steps of: providing a printed circuit board having a tamper-response electronic device; providing a flexible circuit assembly, the flexible circuit assembly comprising: a switch portion comprising connector portion and switch portion between the cable connector portion and the switch portion extends; said switch portion comprises a first and second halves by the hinge connecting portion; a plurality of layers, each of a layer comprising a flexible insulating substrate; a switch disposed in the switch portion, the tamper-response electronic switch device in electrical communication with the conductive path through the printed circuit board; and a first electrically conductive path surrounding the tamper responsive conductor circuit, a first tamper-responsive to the conductor circuit of the printed circuit board in electrical communication with an electronic device in response to tampering; in said connector portion of said flexible circuit assembly mounted to the printed circuit board; and the hinge portion is folded at said switch section, and the first half is fixed to the second half of the switch insert 述第一半部和第二半部之间。 Between said first and second halves.
12. 根据权利要求11所述的方法,还包括:将所述开关部分安装在用户接口设备和一结构之间。 12. The method according to claim 11, further comprising: said switch section is mounted between a user interface device and a structure.
13. 根据权利要求11所述的方法,还包括:监控所述第一篡改响应导体电路的电气特性。 13. The method according to claim 11, further comprising: monitoring electrical characteristics of the first tamper-responsive conductor circuit.
14. 根据权利要求13所述的方法,还包括:当检测到所述第一篡改响应导体电路的电气特性发生变化时,在所述篡改响应电子器件处产生篡改响应。 14. The method of claim 13, further comprising: upon detecting that the first tamper-responsive conductor circuit when electrical characteristics change in response to the generated tamper tamper-response of the electronic device.
15. 根据权利要求11所述的方法,其中,所述开关、所述导电路径和所述篡改响应电子器件包括拆除检测电路,在所述安装步骤期间闭合所述拆除检测电路。 15. The method recited in claim 11, wherein said switch, and said electrically conductive path in response to said electronic device comprises a tamper-removal detection circuit, said removal detection circuit is closed during said mounting step.
16. 根据权利要求15所述的方法,其中,所述开关是薄膜开关。 16. The method according to claim 15, wherein, said switch is a membrane switch.
17. 根据权利要求15所述的方法,其中,所述印刷电路板包括至少一个层,所述至少一个层包括第二篡改响应导体电路。 17. The method according to claim 15, wherein said printed circuit board comprises at least one layer, said at least one second layer comprises a tamper-responsive conductor circuit.
18. 根据权利要求17所述的方法,其中,所述拆除检测电路由所述第一篡改响应导体电路和第二篡改响应导体电路包围。 18. The method of claim 17, wherein said removal detection circuit in response to said first conductor circuit is surrounded by a tamper-responsive conductor circuit and a second tampering.
19. 根据权利要求11所述的方法,还包括:在所述连接器部分和所述印刷电路板之间施加导电性粘合剂,以方便安装。 19. The method according to claim 11, further comprising: applying a conductive adhesive between the connector and the printed circuit board portion, to facilitate installation.
20. 根据权利要求19所述的方法,其中,所述导电性粘合剂允许穿过其厚度传导,但不能横跨其表面传导。 20. The method according to claim 19, wherein the conductive adhesive to allow conduction through its thickness, but not across its surface conductive.
CN201710167832.6A 2011-05-11 2012-05-10 Fuel dispenser input device tamper detection arrangement CN107092844A (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
US13/105,557 2011-05-11
US13/105,557 US8786272B2 (en) 2011-05-11 2011-05-11 Fuel dispenser input device tamper detection arrangement
US13/467,592 US9166586B2 (en) 2012-05-09 2012-05-09 Fuel dispenser input device tamper detection arrangement
CN201280034593.2A CN103703494B (en) 2011-05-11 2012-05-10 The input device falsification detection apparatus tanker

Publications (1)

Publication Number Publication Date
CN107092844A true CN107092844A (en) 2017-08-25

Family

ID=47139659

Family Applications (2)

Application Number Title Priority Date Filing Date
CN201710167832.6A CN107092844A (en) 2011-05-11 2012-05-10 Fuel dispenser input device tamper detection arrangement
CN201280034593.2A CN103703494B (en) 2011-05-11 2012-05-10 The input device falsification detection apparatus tanker

Family Applications After (1)

Application Number Title Priority Date Filing Date
CN201280034593.2A CN103703494B (en) 2011-05-11 2012-05-10 The input device falsification detection apparatus tanker

Country Status (3)

Country Link
EP (1) EP2707859A4 (en)
CN (2) CN107092844A (en)
WO (1) WO2012154937A1 (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10172239B2 (en) * 2015-09-25 2019-01-01 International Business Machines Corporation Tamper-respondent sensors with formed flexible layer(s)
US10175064B2 (en) * 2015-09-25 2019-01-08 International Business Machines Corporation Circuit boards and electronic packages with embedded tamper-respondent sensor
CN105743640A (en) * 2016-01-22 2016-07-06 广州御银科技股份有限公司 Key protection module

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7703201B2 (en) * 2004-10-25 2010-04-27 International Business Machines Corporation Method of embedding tamper proof layers and discrete components into printed circuit board stack-up
US7151461B2 (en) * 2004-10-29 2006-12-19 Honeywell International, Inc. Magnetic contact tamper switch for security accessories
KR20060046933A (en) * 2004-11-12 2006-05-18 노틸러스효성 주식회사 Multi-protecting device of personal identification number-pad module
US20070271544A1 (en) * 2006-05-19 2007-11-22 Rolf Engstrom Security sensing module envelope
US8009032B2 (en) * 2006-11-21 2011-08-30 Gilbarco Inc. Remote display tamper detection using data integrity operations
US20080278353A1 (en) * 2007-05-11 2008-11-13 Measurement Specialties, Inc. Tamper resistant electronic transaction assembly
US8432300B2 (en) * 2009-03-26 2013-04-30 Hypercom Corporation Keypad membrane security

Also Published As

Publication number Publication date
EP2707859A4 (en) 2014-12-03
EP2707859A1 (en) 2014-03-19
CN103703494B (en) 2017-04-12
WO2012154937A1 (en) 2012-11-15
CN103703494A (en) 2014-04-02

Similar Documents

Publication Publication Date Title
AU721933B2 (en) Unattended automated system for selling and dispensing motor fuel accepting a variety of payment methods
US5988509A (en) Refundable prepaid telephone card
US5970146A (en) Data encrypted touchscreen
US5477952A (en) Retrofittable universal secure activity-reporting electronic coin tracker for coin-operated machines, particularly for detecting embezzlement of monies collected by video games
US8479983B1 (en) Automated banking machine operation authorization based on user location verified by data read from data bearing records
CA2292653C (en) Automated filling station with change dispenser
US20110266341A1 (en) Banking system controlled by data bearing records
US7503481B2 (en) Automated banking machine with improved resistance to fraud
US6055521A (en) Unattended automated system for selling and dispensing fluids, with change-dispensing capability
US20040016796A1 (en) Automated banking apparatus and method
KR100389229B1 (en) Transaction processing systems and transaction processing methods
US6643623B1 (en) Method of transacting an electronic mail, an electronic commerce, and an electronic business transaction by an electronic commerce terminal using a gas pump
US5987438A (en) Electronic wallet system
US7479946B2 (en) Ergonomically designed multifunctional transaction terminal
AU2003297322B2 (en) A currency dispense and control system with anti-theft features
US6882900B1 (en) Fuel dispensing and retail system for providing customer selected guidelines and limitations
US8733635B2 (en) Banking system controlled responsive to data bearing records and user input of a phone received security code
US6810304B1 (en) Multistage ordering system for a fueling and retail environment
KR920008069B1 (en) Electronic bankbook and transaction system thereof
US6422464B1 (en) Fuel dispensing system providing customer preferences
US6157871A (en) Fuel dispensing system preventing customer drive-off
US6089284A (en) Preconditioning a fuel dispensing system using a transponder
US6073840A (en) Fuel dispensing and retail system providing for transponder prepayment
ES2210139T3 (en) elastomeric membrane anti-intrusion for secured electronic boxes.
US6470233B1 (en) Fuel dispensing and retail system for preventing use of stolen transponders

Legal Events

Date Code Title Description
PB01
SE01